$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa File: 31d36ece-9039-43a2-82a2-03e7d8e7f563.roa (raw, json) Hash identifier: if6/YyXnP0ZUzdVOBEMP0L9rLzNQgyxrfF1nQygpnEQ= Subject key identifier: DA:38:EA:6A:53:8E:39:AB:D2:5D:F2:CD:33:60:C7:59:68:CC:FE:26 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 400DB6EF7289CF3EC8D475DDFB9C0FF9DF2FE1A2 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa Signing time: Tue 04 Aug 2026 00:00:14 +0000 ROA not before: Tue 04 Aug 2026 00:00:14 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80fc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0d:b6:ef:72:89:cf:3e:c8:d4:75:dd:fb:9c:0f:f9:df:2f:e1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:14 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=3bdec4b9f303938cfe105f46ed56f506cecba511e090285e8287177c4238fe88, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d5:9b:f5:3d:b9:d4:57:14:ef:e7:b4:5c:53: 9e:e5:71:e8:d6:fd:9b:72:ac:d9:c4:c6:b7:51:f5: 84:77:10:f9:6f:b8:08:58:03:e3:96:87:1e:11:98: 74:f5:49:ab:64:0d:02:98:49:54:80:25:0f:1e:86: 3f:19:00:9b:22:f1:c9:e7:c8:d0:3f:37:87:d5:32: 0d:0c:aa:c7:85:96:fb:d1:87:b0:bb:c2:61:31:81: ff:5a:a7:3c:2c:4b:b4:bb:9b:34:ba:bf:52:60:e2: 8e:00:5c:e2:2c:cd:1f:8e:94:27:56:c6:3c:ba:a8: e2:8e:4f:dd:44:c9:55:e5:e5:90:61:d7:c8:a8:b6: 03:e1:4e:b7:5e:b0:06:c7:eb:3a:a0:f8:dd:61:f9: b9:c0:88:c6:26:d0:36:46:52:2b:f6:24:46:a2:5b: 8b:79:e0:cf:83:32:ec:20:21:25:40:1e:5a:29:c0: 94:89:6d:4a:60:03:e7:27:9e:d5:1b:53:16:18:40: 2d:c5:67:a7:c4:74:50:0d:aa:51:f3:f0:86:e1:c8: 77:d4:5a:23:e5:3c:61:2f:5a:4c:39:4a:6b:4e:1c: 2f:85:6b:ca:35:e8:2a:e7:fb:94:4e:de:00:78:2d: 0a:ea:37:d9:f9:64:37:4d:97:c1:ed:61:3e:9a:92: 15:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:38:EA:6A:53:8E:39:AB:D2:5D:F2:CD:33:60:C7:59:68:CC:FE:26 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/31d36ece-9039-43a2-82a2-03e7d8e7f563.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80fc::/32 Signature Algorithm: sha256WithRSAEncryption 92:97:46:82:a1:da:d0:53:c6:f6:7e:8b:70:e5:19:1e:49:31: 6d:bf:23:5b:8d:f2:71:40:f9:d9:ba:02:61:62:96:7f:37:86: b2:e0:f1:de:ea:05:c4:f5:6d:60:b4:ac:f5:a5:67:bb:68:59: 10:28:ea:91:ad:c8:92:e8:9a:3b:98:62:ce:8e:7c:93:0e:eb: 2a:32:4f:2d:ed:64:3b:1a:40:bf:d0:3d:cf:0d:f5:80:c1:66: 38:3d:c8:11:31:a0:79:c0:6a:25:48:9b:14:34:ee:5a:22:73: ac:28:e4:33:b0:b2:00:25:9c:84:7b:44:a4:b2:49:02:91:e7: 33:77:53:93:7e:76:e1:f9:2c:8a:a8:e8:d1:e1:01:f6:15:45: 96:9c:6d:a1:c8:0e:7e:a1:09:34:52:19:53:35:cf:3f:cc:d4: 3f:75:c0:ef:47:bb:f2:78:8e:85:bb:d5:e1:17:48:24:1f:3b: d0:fc:17:ab:71:e9:3d:3c:52:d5:4f:ae:b0:3e:56:2a:8a:66: 53:0e:ef:77:f6:6e:64:7e:0f:a8:10:ab:5c:bc:53:33:9a:b8: 0a:ed:ea:22:02:a4:c3:0e:bc:77:04:b6:e1:9f:34:42:dc:25: 60:0e:22:04:0f:9a:0a:c4:90:c5:07:a3:e9:26:03:d3:4b:15: 8c:81:55:2f -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUQA2273KJzz7I1HXd+5wP+d8v4aIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAxNFoX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAM2JkZWM0YjlmMzAzOTM4Y2ZlMTA1 ZjQ2ZWQ1NmY1MDZjZWNiYTUxMWUwOTAyODVlODI4NzE3N2M0MjM4ZmU4ODEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NWb9T251FcU7+e0XFOe5XHo1v2b cqzZxMa3UfWEdxD5b7gIWAPjloceEZh09UmrZA0CmElUgCUPHoY/GQCbIvHJ58jQ PzeH1TINDKrHhZb70Yewu8JhMYH/Wqc8LEu0u5s0ur9SYOKOAFziLM0fjpQnVsY8 uqjijk/dRMlV5eWQYdfIqLYD4U63XrAGx+s6oPjdYfm5wIjGJtA2RlIr9iRGoluL eeDPgzLsICElQB5aKcCUiW1KYAPnJ57VG1MWGEAtxWenxHRQDapR8/CG4ch31Foj 5TxhL1pMOUprThwvhWvKNegq5/uUTt4AeC0K6jfZ+WQ3TZfB7WE+mpIV1QIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFNo46mpTjjmr0l3yzTNgx1lozP4mMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 LzMxZDM2ZWNlLTkwMzktNDNhMi04MmEyLTAzZTdkOGU3ZjU2My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJA+A/DANBgkqhkiG9w0BAQsFAAOCAQEAkpdGgqHa0FPG9n6LcOUZ Hkkxbb8jW43ycUD52boCYWKWfzeGsuDx3uoFxPVtYLSs9aVnu2hZECjqka3Ikuia O5hizo58kw7rKjJPLe1kOxpAv9A9zw31gMFmOD3IETGgecBqJUibFDTuWiJzrCjk M7CyACWchHtEpLJJApHnM3dTk3524fksiqjo0eEB9hVFlpxtocgOfqEJNFIZUzXP P8zUP3XA70e78niOhbvV4RdIJB870PwXq3HpPTxS1U+usD5WKopmUw7vd/ZuZH4P qBCrXLxTM5q4Cu3qIgKkww68dwS24Z80QtwlYA4iBA+aCsSQxQej6SYD00sVjIFV Lw== -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:27 2026 by rpki-client